New answers tagged http
0
votes
How to mitigate risk of exploiting open POST endpoints?
In general attacks on POST operations are:
Memory exhaustion attacks. The attacker sends a big payload on the POST for exhaust internal buffers/memory that handles the data. (For example Slowloris). ...
- 1,932
2
votes
Accepted
Modifying request responses leading to unauthorized access?
This is a plain ol' run-of-the-mill Broken Access Control
Bypassing access control checks by modifying the URL...
This type of problem is #1 in OWASPs Top 10 list
Solution: Authentication and access ...
- 123k
0
votes
Should I disable HTTP HEAD requests?
NMAP Uses HEAD Requests in Script: 'http-security-headers'
A common technique in penetration testing is to confirm HSTS secure connections over HTTPS by using the NMAP command below, which uses HEAD ...
0
votes
Validate HTTPS traffic at later time
TLSv1.3 explicitly prevents this kind of traffic analysis "at later time", i.e. without having the internal state of both sides. This is called "perfect forward secrecy" (PFS).
In ...
- 3,395
Top 50 recent answers are included